ICE’s Homeland Security Investigations runs the administrative side of worksite enforcement through the Form I-9 Inspection Program. The criminal side — INA 274 alien-smuggling charges against owners, harboring, identity-fraud counts under 18 U.S.C. § 1546 — is the part that makes headlines. But the administrative audit is what most employers actually face: a Notice of Inspection handed to the HR director, three business days to produce I-9s and supporting records, and a civil-penalty matrix that turns paperwork hygiene into six- and seven-figure exposure.
What changed
The statutory architecture is INA 274A, which makes it unlawful to knowingly hire or continue to employ an unauthorized worker and requires every employer to verify identity and employment authorization on Form I-9. HSI’s enforcement powers under that section, including the inspection-and-civil-penalty framework, are codified at 8 C.F.R. 274a.2. The mechanics — service of a Notice of Inspection, the three-business-day production window, employer cure rights for technical or procedural failures, and the conversion to a Notice of Intent to Fine — are unchanged since the 2009 program reorganization but have been operationalized through HSI’s Worksite Enforcement Strategy reissued in October 2021, which redirected high-volume raids toward focused investigations of exploitative employers.
A Notice of Inspection requires the employer to produce, within three business days of service, all I-9s for current employees and for employees terminated within the retention window of the later of three years after hire or one year after termination. The NOI typically also asks for a current employee roster with hire and termination dates, payroll records, Articles of Incorporation, the business license, the owner’s Social Security card, and any E-Verify case records. The auditor reviews the I-9 stack against the roster and flags two categories of defects: technical or procedural failures (most commonly missing or incorrect dates, abbreviation issues, signature blocks, or missing reverification on List A documents) and substantive failures (failure to complete Section 2 within three business days of hire, failure to ensure the employee completed Section 1 on day one, knowing acceptance of obviously fraudulent documents).
The cure rule sits at 8 C.F.R. 274a.10(b)(2): the employer gets at least 10 business days to correct technical or procedural failures after the auditor identifies them. Uncured technical failures and any substantive failures convert into civil penalties under the I-9 paperwork violation matrix tied to the percentage of violations in the audited population, with civil penalty amounts adjusted annually for inflation and now ranging from $281 to $2,789 per violation for paperwork and from $698 to $27,894 per worker for knowing hire or continuing to employ. A Notice of Suspect Documents issues separately when the auditor concludes specific employees lack work authorization; the employer then has a defined window to give those employees an opportunity to present alternative documentation before the INA 274A(a)(2) continuing-to-employ violation clock starts.
If the auditor finds violations and the cure period closes without resolution, HSI issues a Notice of Intent to Fine. The employer has 30 days from receipt of the NIF to request a hearing before an Administrative Law Judge in the Office of the Chief Administrative Hearing Officer within DOJ-EOIR. Failure to request a hearing converts the NIF into a Final Order. OCAHO has authority to adjust penalty amounts and has routinely reduced government-proposed fines where the employer showed good-faith compliance efforts, small size, lack of unauthorized workers actually hired, and lack of history of prior violations — the five statutory mitigation factors at 8 U.S.C. 1324a(e)(5).
Why it matters
The three-business-day clock is the part employers underestimate. Three business days from the moment the NOI is served is enough time to gather a current I-9 binder if the company runs a centralized HR file room and uses electronic I-9. It is not enough time for a multi-site retailer with 14 store-manager binders to drive copies to corporate, vet for completion gaps, and assemble the supplementary roster + payroll + ownership package HSI typically requests. Requesting an extension is allowed but discretionary; auditors generally grant a one-time extension of up to seven additional business days when asked promptly and in writing.
The cure period is the part that drives outcome. A 200-employee audit with 50 missing-Section-2-date defects — all technical — that the employer cures within the 10-day window produces zero civil penalty for those entries. The same 50 defects left uncured at $281 to $2,789 per violation produces a base civil penalty between $14,050 and $139,450 before mitigation. The math is unforgiving in either direction: a clean cure costs the time it takes a paralegal to walk the binder; a missed cure produces a six-figure NIF.
The intersection with E-Verify matters too. E-Verify enrollment is a mitigation factor under the OCAHO matrix, but participation does not insulate the employer from an I-9 audit and does not cure a defective Section 2. An employer that runs E-Verify queries off a Section 2 that was never completed on time is still exposed on the paperwork violation. The two regimes are independent compliance obligations.
Finally, the post-2021 Mayorkas worksite enforcement strategy redirected HSI resources toward employers exploiting labor-trafficking and wage-theft workforces, which means an NOI today is more likely to be triggered by a Department of Labor referral following a wage-and-hour complaint than by a random sweep. Employers should expect a multi-agency posture — DOL, HSI, sometimes OSHA — at the same site.
Way forward
If you are served a Notice of Inspection, do not produce records on day one. Acknowledge receipt, request a written copy of the NOI and the auditor’s contact card, and reach out to immigration counsel within hours. The three-business-day clock is a hard deadline for production, not for cooperation; a brief, professional request for a seven-day extension on letterhead, sent the same day, is routinely granted and gives you the bandwidth to assemble the package correctly.
Use the production period to do a self-audit of every I-9 you intend to hand over, applying the USCIS Handbook for Employers M-274 correction protocol — initial and date every correction in a different color, never backdate, never use white-out, never re-create a missing I-9 with current-day information (a missing I-9 is a substantive violation; a “fixed” backdated I-9 is fraud). Document every correction in a contemporaneous remediation log so you can show OCAHO the good-faith compliance effort mitigation factor.
When the auditor’s findings letter arrives, treat the 10-business-day cure window as the most important deadline in the audit. Cure every technical defect listed and every defect the auditor missed but you found on your own self-audit; the cure does not extend the auditor’s universe, but a comprehensive remediation supports the good-faith mitigation factor at the OCAHO stage.
If a Notice of Intent to Fine issues, file the written request for a hearing within the 30-day window. The decision to settle versus litigate at OCAHO is a numbers-and-evidence call that depends on the violation rate, mitigation posture, and whether unauthorized workers were actually hired. OCAHO’s published opinions are the best guide to realistic outcomes.
Disclaimer
This article from Fola Editorial is general information, not legal advice. ICE worksite enforcement procedures, penalty amounts, and HSI strategy shift with each administration. For a live NOI, NIF, or Notice of Suspect Documents, retain immigration counsel immediately and verify the current rule directly at ice.gov and uscis.gov.